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Abstract. 

We describe the hashing technique to obtain a fast approximation of a target 
quantum gate in the unitary group SU(2) represented by a product of the elements of 
a universal basis. The hashing exploits the structure of the icosahedral group [or other 
finite subgroups of SU(2)] and its pseudogroup approximations to reduce the search 
within a small number of elements. One of the main advantages of the pseudogroup 
hashing is the possibility to iterate to obtain more accurate representations of the 
targets in the spirit of the renormalization group approach. We describe the iterative 
pseudogroup hashing algorithm using the universal basis given by the braidings 
of Fibonacci anyons. The analysis of the efficiency of the iterations based on 
the random matrix theory indicates that the runtime and the braid length scale 
poly-logarithmically with the final error, comparing favorably to the Solovay-Kitaev 
algorithm. 
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1. Introduction 

The possibility of physically implementing quantum computation opens new scenarios 
in the future technological development. This justifies the deep efforts made by the 
scientific community to develop theoretical approaches suitable to effectively build a 
quantum computer and, at the same time, to reduce all the sources of errors that would 
spoil the achievement of quantum computation. 

To implement quantum computation one needs to realize, through physical 
operations over the qubits, arbitrary unitary operators in the Hilbert space that 
describes the system. This task can be achieved by using a finite number of elementary 
gates that constitutes a basis. A small set of gates is said to be universal for quantum 
computation if it allows to approximate, at any given accuracy, every unitary operator 
in terms of a quantum circuit made of only those gates [1] . It can be shown that a basis 
able to reproduce every SU(2) operator and one entangling gate (as CNOT) for every 
pair of qubits is indeed universal [2] ; therefore the problem of finding an approximation 
of unitary operators in SU (N) can be reduced in searching an efficient representation, 
in terms of the elements of the basis, of single-qubit gates in SU(2) and of the two-qubit 
gate CNOT. 

For SU(2) it is possible to find a universal set of single-qubit operators involving just 
two elementary gates, which we will label as o\ and er 2 (not to be confused with Pauli 
matrices!), and their inverses, erf 1 and cr.f 2 . This means that every single-qubit gate 
can be efficiently approximated by a string of these four elementary elements. In the 
scheme of topological quantum computation, these fundamental gates are realized by 
elementary braid operation on the excitations of the system, the anyons. In order to be 
universal, the group obtained by multiplying the four a gates must be dense in SU(2): 
it is therefore sufficient that 0\ and er 2 do not belong to the same finite subgroup of 
SU(2). For what concerns controlled gates in S77(4) as CNOT, their approximation can 
be usually reduced to the case of operators in SU(2), as described in Refs. [5] and [21] 
in the context of topological quantum computation, the main subject of our following 
considerations. 

The simplest way to obtain an approximation of a given target gate T e SU{2) 
using only four elementary gates af\ is to search, among all the ordered products of 
iV of such operators, the one which best represents T minimizing its distance to it 
(the rigorous definition of distance is given in section [3]). This operation is called the 
brute-force procedure [5]. The number of all the possible products of this kind grows 
exponentially in N as a N (where a ~ 3) and, because of the three-dimensional nature 
of SU(2), one can show that, for a suitable choice of the universal basis, the average 
error obtained with different targets decreases approximately as e~~3~ lnc * (in section [3721 
we will describe in more detail the brute-force search for Fibonacci anyons). 

This approach, consisting of a search algorithm over all the possible ordered product 
up to a certain length, has an extremely clear representation if one encodes qubits using 
non-abelian anyons. In this case, the computational basis for the quantum gate is the 
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set of the elementary braidings between every pair of anyons, and their products are 
represented by the braids describing the world lines of these anyonic quasiparticles. 
Starting from this kind of universal basis, the search among all the possible products of 
N elements gives, of course, the optimal result, but the search time is exponential in N 
and therefore it is impractical to reach sufficiently small error for arbitrary gates. 

There are, however, other possible approaches that allow to reach an arbitrary small 
error in a faster way, even if they do not obtain the best possible result in terms of the 
number N of elementary gates involved. The textbook example is the Solovay-Kitaev 
algorithm [HOH]. This algorithm provides a powerful tool to obtain an approximation 
of arbitrary target gates in SU(2) at any given accuracy starting from an e-net, i.e. a 
finite covering of SU(2) such that for every single-qubit operator T there is at least 
one gate inside the e-net that has a distance from T smaller than e. The Solovay- 
Kitaev algorithm is based on the decomposition of small rotations with elements of the 
e-net and both the runtime and the length of the final product of elementary gates 
scale poly-logarithmically with the final error e. The exponents depend on the detailed 
construction of the algorithm: the simplest realization of the algorithm, as provided in [5] 
in the context of topological quantum computation, is characterized by the following 
scaling: 

iV ~ (In {l/e)) c with c 

T~(ln(l/e)) d with d 

As discussed in the Appendix 3 of [T] and in [1], a more sophisticated implementation 
of the Solovay-Kitaev algorithm realizes 

A^(ln(l/,)) 2 ln(ln(l/e)) (3) 
T~(ln(l/5)) 2 ln(ln(l/,)). (4) 

The hashing algorithm, which was proposed in Ref. [6j, has the aim of obtaining 
a more efficient approximation of a target operator than the Solovay-Kitaev algorithm 
in a practical regime, with a better time scaling and without the necessity of building 
an e-net covering the whole target space of unitary operators. Our main strategy will 
be to create a dense mesh S of fine rotations with a certain average distance from the 
identity and to reduce the search of the target approximation to the search among this 
finite set of operators that, in a certain way, play the role of the e-net in a neighborhood 
of the identity. This set will be built exploiting the composition property of a finite 
subgroup (the icosahedral group) of the target space SU(2) and exploiting also the 
almost random errors generated by a brute-force approach to approximate at a given 
precision the elements of this subgroup. Therefore the algorithm allows us to associate 
a finite set of approximations to the target gate and each of them is constituted by an 
ordered product of the elementary gates chosen in a universal quantum computation 
basis. Since our braid lookup task is similar to finding items in a database given its 
search key, we borrow the computer science terminology to name the procedure hashing. 
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With this algorithm we successfully limit our search within a small number of 
elements instead of an exponentially growing one as in the case of the brute-force search; 
this significantly reduces the runtime of the hashing algorithm. Furthermore, we can 
easily iterate the procedure in the same spirit of the renormalization group scheme, 
based on the possibility of restricting the set S in a smaller neighborhood of the identity 
at each iteration, obtaining in this way a correction to the previous result through a 
denser mesh. 

In Sec. [2] we briefly review the main ideas of topological quantum computation, 
which is the natural playground for the implementation of the hashing procedure, we 
use Fibonacci anyons to encode qubits and define their braidings operators that are the 
main example of universal elementary gates that we use to analyze our algorithm. In 
Sec. [3]we introduce the basic ideas of the icosahedral group and its braid representations, 
which are pseudogroups. We describe in detail the iterative hashing algorithm in Sec. H] 
and analyze performance of its iteration scheme in Sec. refefficiency. We conclude in 
Sec. EJ In Appendix A we derive the distribution of the best approximation in a given 
set of braids, which can be used to estimate the performance of, e.g., the brute-force 
search. 



2. Topological quantum computation and Fibonacci anyons 

The discovery of condensed matter systems which show topological properties and 
cannot be described simply by local observables has opened a new perspective in the field 
of quantum computation. Topological quantum computation is based on the possibility 
of encoding the qubits necessary for quantum computation in topological properties of 
physical systems, and obtaining in such a way a fault-tolerant computational scheme 
protected by local noise [7HTT]. 

For topological quantum computation one needs anyons with non-abelian statistics. 
Unlike fermions or bosons, anyons are quasiparticles whose exchange statistics is 
described not by the permutation group, but by the braid group, generated by 
the elementary exchanges of anyon pairs. In particular, in certain two-dimensional 
topological states of matter, a collection of non-Abelian anyonic excitations with fixed 
positions spans a multi-dimensional Hilbert space and, in such a space, the quantum 
evolution of the mult i- component wavefunction of the anyons is realized by braiding 
them. 

Therefore, it is natural to consider the unitary matrices representing the exchange 
of two anyons as the elementary gates for a quantum computation scheme. In this 
way the universal basis for the quantum computation acquires an immediate physical 
meaning and its elements are implemented in a fault-tolerant way; therefore the problem 
of approximating a target unitary gate is translated in finding the best "braid" of anyons 
that represents the given operator up to a certain length of ordered anyons exchanges [5]. 

There are several physical systems characterized by a topological order that are 
suitable to present non-abelian anyonic excitations. The main experimental candidates 
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are quantum Hall systems in semiconductor devices (see [12] for an introduction to the 
subject), as well as similar strongly correlated states in cold atomic systems [13], p x + ip y 
superconductors [H], and superconductor-topological insulator heterostructures [15] . 

One of the most studied anyonic models is the Fibonacci anyons model (see for 
example [5l fl6T4T9] ) so named because the dimension of their Hilbert space follows the 
famous Fibonacci sequence, which imply that their quantum dimension is the golden 
ratio cp = (a/5 + l)/2. Fibonacci anyons (denoted by as opposed to the identity 1) 
are known to have a simple fusion algebra (0x0 = + 1) and to support universal 
topological quantum computation [8]. Candidate systems supporting the Fibonacci 
fusion algebra and braiding matrices include fractional quantum Hall states known as 
the Read-Rezayi state at filling fraction v = 3/5 [20] (whose particle- hole conjugate is 
a candidate for the observed v = 12/5 quantum Hall plateau [21]) and the non-Abelian 
spin-singlet states at v = 4/7 [22J. 

Every anyonic model, as the one of Fibonacci anyons, is characterized by several 
main components: the superselection sectors of the theory are the different kinds of 
anyons which are present (1 and in our case), their behaviour is described by the 
fusion and braiding rules that are linked through the associativity rules of the related 
fusion algebra, expressed by the so called F matrices (see Refs. [Hl[23] for a general 
introduction to the anyonic theories and Ref. [5] for its application to the Fibonacci 
case) . 

If we create two pairs of 0s out of the vacuum, both pairs must have the same fusion 
outcome, 1 or 0, forming a qubit; therefore the logical value of the qubit is associated 
to the result of the fusion of the two Fibonacci anyons inside the first or the second 
pair, while the total fusion outcome is the vacuum. The braiding of the four 0s can be 
generated by two fundamental braiding matrices (related by the Yang-Baxter equation) 



0"! 



e -i47T/5 Q 

_ e -i2n/5 



a 2 = F- l a x F 



(5) 



(6) 



and their inverses a 1 1 , a 2 ■ Here r = ip~ - 1 = (y/E- l)/2. We notice that <7i is the 
elementary braiding involving two anyons in the same pair, thus it is diagonal in the 
qubit basis; instead, cr 2 describes the braiding of anyons in different pairs and can be 
obtained by the change of basis defined by the associativity matrix F. 

This matrix representation of the braidings generates a four-strand braid group 
B4 (or an equivalent three-strand braid group S3): this is an infinite dimensional 
group consisting of all possible sequences of length L of the above generators and, with 
increasing L, the whole set of braidings generates a dense cover of the SU(2) single-qubit 
rotations. 

Besides, Simon et al. [T7] demonstrated that, in order to achieve universal quantum 
computation, it is sufficient to move a single Fibonacci anyon around the others at fixed 
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position. Thanks to this result, one can study an infinite subgroup of the braid group 
B which is the group of weaves, braids characterized by the movement of only one 
quasiparticle around the others. From a practical point of view it seems simpler to 
realize and control a system of this kind, therefore we will consider only weaves in the 
following. There is also another advantage in doing so: the elementary gates to cover 
SU(2) become of, a\ and their inverses; therefore the weaves avoid the equivalence 
between two braids caused by the Yang-Baxter relations, so that it is more immediate 
to find the set of independent weaves up to a certain length. In fact, the only relations 
remaining for Fibonacci anyons that give rise to different but equivalent weaves are the 
relations o 10 = a\° = 1, because they imply that of = o^ 4 and one can always reduce 
weaves with terms of the kind af & to shorter but equivalent ones. 

In order to calculate the efficiency in approximating a target gate through the 
brute-force search, which gives the optimal result up to a certain length, it will be useful 
calculating here the number of independent weaves of Fibonacci anyons; in general a 
weave of length L can be written as 

a qi a q2 ---a qs (7) 

where pi e {1, 2}, pi ^ p%±i, and ^ \q,i\ = L. As mentioned above, to ensure that this 
braid is not equivalent to a shorter braid, one must have = ±2 or ±4. 

Let us assume the number of length- L weaves is N(L), consisting of iV 4 (L) weaves 
ending with a p 4 and N 2 (L) weaves ending with a p 2 . To form a weave of length L + 2, 
the sequence must be appended by of or a~ 2 . For sequences ending with a 2 (or o~ 2 ), 
we can append a 2 (or cr p 2 ), cr 2 _ p , or a^ 2 p . However, for sequences ending with a p (or 
o~ 4 ), we can only append a 2 _ p or cr^ 2 p . Therefore, we have the recurrence relations: 

N(L) = N,(L)+N 2 (L), (8) 
N(L + 2) = 2iV 4 (L) + 3iV 2 (L), (9) 
N^L + 2) = N 2 {L). (10) 

With an ansatz N(L) ~ a L ^ 2 [and so are N 4 (L) and N 2 (L)], we find a — 1 ± \/3. 
Therefore the exact number of weaves of length L is 

n(l) = i i -7i)( i - + + 7i) ( i + ^) m ' (u) 

which grows as (1 + \/3) L ^ 2 asymptotically. 



3. SU(2), subgroups and pseudogroups 

3.1. Single-qubit gates and distances in SU(2) 

The hashing algorithm allows to approximate every target single-qubit gate in SU(2) 
exploiting the composition rules of one of its subgroups, as the icosahedral one; therefore 
it is useful to consider the standard homomorphism from the group of rotations in 
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£0(3), and the group of single-qubit gates, that permits to write every operator 
I SU(2) as 



U E SU(2) as 
U (m, 0) = e ilh - ffW2) 

cos(0/2) + im z sin(0/2) m y sin(0/2) + im x sin(0/2) 

— m y sin(0/2) + im x sin(0/2) cos(0/2) — im z sin(0/2) 



(12) 



U (m,(p) represents a rotation, in SO(3), of an angle around the axes identified by 
the unitary vector in. Therefore, if we exclude an overall phase, which is unimportant 
to the purpose of single-qubit gates, SU(2) can be mapped on a sphere of radius n: a 
point in the sphere defined by a radius < < 7r in the direction m corresponds to the 
rotation U(rh, 0). In the following we will often address the elements of SU(2) not only 
as single qubit gates but also as rotations, implicitly referring to this homomorphism. 

The distance d (also referred to as error) between two gates (or their matrix 
representations) U and V is defined as the operator norm distance 

d(U,V) = \\U-V\\= sup \\(U-V)ip\\. (13) 

U\\=i 

Thus, if we consider two operators U = U (m, 0) and V = U{h, 6) the distance between 
them is 



9 (f) 9 

d (U, V) = d 2 — 2 cos — cos — — 2m ■ n sin — sin -, (14) 

which is bound above by \/2. We notice that the distance of a rotation U (m, (p) from 
the identity operator is d = 2 sin (0/4). 

3.2. Brute-force search with Fibonacci anyons 

First, we estimate the efficiency for the brute-force search algorithm through the 
probability distribution of the error of any weave of length L from a given target 
gate in SU(2). We assume that the collection of nontrivial weaves of length L, whose 
number is N(L) as given in Eq. ( ITT]) , are uniformly distributed on the sphere of SU(2). 
Representing the elements of SU(2) on the surface of the four- dimensional sphere, we 
find the distribution pBF{d) of their distance from the identity operator to be 

4 



p BF (d) = -d 2 Jl-(d/2) 2 (15) 

7T v 

where d = 2 sin (0/4). 

Given this distribution, we obtain the average error for the brute-force search to be 

< L) = *> 1 '° 21e " /5 97 ° <16) 

asymptotically (see | Appendix A] for more detail). 
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Figure 1. The average errors (dots) of the approximations to the 60 rotations of the 
icosahedral group with the brute-force search as a function of the length of the weaves 
used. These errors characterize the pseudogroups used in the hashing algorithm for 
the lengths L = 8, 24, 32, 40, and 44. The results are in very good agreement with the 
prediction in Eq. (fTB"| (solid line). 

3.3. The Icosahedral group 

The hashing procedure relies on the possibility of exploiting the group structure of a 
finite subgroup of the target space to build sets S (L) of fine rotations, distributed with 
smaller and smaller mean distances from the identity, that can be used to progressively 
correct a first approximation of a target gate T. Therefore, it is fundamental to search, 
for every target space of unitary operators, a suitable subgroup to build the sets S. 
Among the different finite subgroups of SU(2) we considered the SO (3) subgroups 
corresponding to the symmetry group of the icosahedron and of the cube, which have 
order 60 and 24, respectively. However, for practical purposes, we will refer in the 
following mainly to the icosahedral group because its implementation of the hashing 
algorithm, as we will describe below, is more efficient in terms of the final braid length. 

The icosahedral rotation group X is the largest polyhedral subgroup of SU(2), 
excluding reflection. For this reason, it has been often used to replace the full SU(2) 
group for practical purposes, as for example in earlier Monte Carlo studies of SU(2) 
lattice gauge theories [25] , and its structure can be exploited to build meshes that cover 
the whole SU(2) [26]. 

X is composed by 60 rotations around the axes of symmetry of the icosahedron 
(platonic solid with twenty triangular faces) or of its dual polyhedron, the dodecahedron 
(regular solid with twelve pentagonal faces); there are six axes of the fifth order 
(corresponding to rotations with fixed vertices), ten of the third (corresponding to the 
triangular faces) and fifteen of the second (corresponding to the edges). Let us for 
convenience write X = {g , gi, ...,g 59 }, where g = e is the identity element. In figure [2^ 
the elements of the icosahedral group are represented inside the SU(2) sphere. 
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Because of the group structure, given any product of n elements of a subgroup 
9h9t2 " ' 9in t nere always exists a group element gi n+1 = g" 1 ■ ■ ■ g~ that is its inverse. 
In this way g% x g^ ■ ■ ■ 9i n 9i n+1 = e and one can find O n different ways of obtaining the 
identity element, where O is the order of the group (60 in the case of the icosahedral 
one). This is the key property we will use in order to create a dense mesh S of fine 
rotations distributed around the identity operator in the target space. To achieve this 
goal, however, we need to break the exact group structure and to exploit the errors 
given by a brute-force search approximation of the elements of the chosen subgroup. 

3.4- Pseudogroup 

The main idea in the realization of the mesh S is that, representing the 60 elements 
of the subgroup X with weaves of a given length L, we can control, due to the relation 
(j!6p . the average distance (or error) between the exact rotations in X and their braid 
representations that constitute the set X(L) which we will refer to as a pseudogroup. 




Figure 2. a: The icosahedral group representation inside the SU(2) sphere, b: the 
pseudogroup representation 1(8) used in the preprocessor. Due to the large errors 
(~ 0.24) the elements of 1(8) seem to span the SU(2) sphere randomly. 

Thanks to the homomorphism between SU(2) and 5*0(3) we associate to every 
rotation g G X a 2 x 2 matrix ( fl2l) . Then we apply a brute- force search of length L 
to approximate the 60 elements in X; in this way we obtain 60 braids that give rise to 
the pseudogroup X(L) = {g (L),gi(L), . . . , g 59 (L)}. These braids are characterized by 
an average distance e(L) with their corresponding elements j f 6l given by Eq. f fl~6]) . 
We notice from Fig. [2] that the large errors for L = 8 completely spoil the symmetry 
of the group (and we will exploit this characteristic in the preprocessor of the hashing 
algorithm); however, increasing the length L, one obtains pseudogroups with smaller 
and smaller errors. Choosing, for instance, a fixed braid length of L = 24, the error of 
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each braid representation to its corresponding exact matrix representation varies from 
0.003 to 0.094 with a mean distance of 0.018. 

Therefore the braid representations of the icosahedral group with different lengths 
are obtained by a brute-force search once and for all. The so obtained braids are then 
stored for future utilizations and this is the only step in which we apply, preliminarily, a 
brute-force search. Due to limiting computing resources, we construct the pseudogroups 
representations for the 60 rotations up to the length L = 68, which, as we will describe 
below, is sufficient to implement three iterations of the hashing algorithm. In principle 
one could calculate the brute-force approximation of the group elements to larger lengths 
once and for all, in order to use them for a greater number of iterations. The average 
errors characterizing the main pseudogroups we use in the iterations are shown in Fig. 
[T| they agree well with Eq. ( ITBT) . 

Let us stress that that the 60 elements of X(L) (for any finite L) do not close 
any longer the composition laws of the icosahedral group; in fact a pseudogroup Q{V) 
becomes isomorphic to its corresponding group Q only in the limit L — > oo. If the 
composition law g^gj = g^ holds in X, the product of the corresponding elements 
(ji(L) and (jj(L) is not gk{L), although it can be very close to it for large enough 
L. Interestingly, the distance between the product ^(L)^(L) and the corresponding 
element of X can be linked to the Wigner-Dyson distribution (see Sec. 14. 2p . 

Using the pseudogroup structure of X(L), it is easy to generate a mesh S(L) made 
of a large number of braids only in the vicinity of the identity matrix: this is a simple 
consequence of the original group algebra, in which the composition laws allow us to 
obtain the identity group element in various ways. The set S is instrumental to achieve 
an important goal, i.e. to search among the elements of S the best correction to apply 
to a previous approximation of the target single-qubit gate T we want to hash. 

It is important to notice that, changing the length L of the pseudogroup 
representation, we can control the average distance of the fine rotations in S from 
the identity. To correct an approximation of T with an error e, we need a mesh S 
characterized by roughly the same average error in order to reach an optimal density of 
possible corrections and so increase the efficiency of the algorithm. Therefore, knowing 
the average error of the distribution of the approximations we want to improve, we can 
choose a suitable L to generate a mesh. As represented in Fig. El this allows us to 
define a series of denser and denser meshes to iterate the hashing algorithm in order to 
correct at each step the expected mean error, which we have determined by analyzing 
the distributions of errors of 10000 random targets after the corresponding iteration. 

To create the mesh of fine rotations, labeled by S(L, n), we consider all the possible 
ordered products g^^g^^L) . . .g in (L) of a fixed n > 2 elements of X(L) of length L 
and multiply them by the matrix g in+1 (L) G X(L) such that g in+1 = g" 1 . . -gZ gZ 1 - In 
this way we generate all the possible combinations of n + 1 elements of X that produce 
the identity, but, thanks to the errors that characterize the braid representation X, we 
obtain 60™ small rotations in SU(2), corresponding to braids of length (n + 1)L. In 
Sec. 14.21 we will describe their distribution around the identity with the help of random 
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L =8 ■ L =24 n L =44 n L =68 




matrices. 



Figure 3. Distribution of the meshes S(L, 3) used by the renormalization scheme of 
the hashing algorithm. The distance d from the identity is represented in logarithmic 
scale. The mesh with L = 8 comprehends every possible product of three elements 
in X(8) and, therefore, it spans the whole SU(2) space up to the distance The 
meshes 5(24,3), 5(44,3) and 5(68,3), instead, are the product of four braids whose 
corresponding rotations are combined to approximate the identity. 5(24, 3) and 
5(44,3) follow the Wigner-Dyson distribution while 5(68,3) exhibits a second local 
maximum due to the incomplete brute- force search we used to obtain 1(68). 



4. Itarative pseudogroup hashing in SU(2) 



4-1. The iterative pseudogroup hashing algorithm 

The hashing algorithm is based on the possibility of finding progressive corrections to 
minimize the error between the target gate T e SU(2) and the braids that represent it. 
These corrections are chosen among the meshes «S(Lj, 3) whose distribution around the 
identity operator is shown in Fig. [3] 

The algorithm consists of a first building block, called preprocessor, whose aim is 
to give an initial approximation T of T, and a main processor composed of a series of 
iterations of the hashing procedure that, at each step, extend the previous representation 
by a braid in S(Li, 3). The final braid has the form 

^3 = 9h ( L o) ■ ■ ■ 9jz ( L o) 9 P1 (Li) ■ ■ ■ g P4 (Li) g qi (L 2 ) ■■■g q4 (L 2 ) g n (L 3 ) • • • g r4 (L 3 ) (17) 



Preprocessor 



V 

1st Iteration 



2nd Iteration 



3rd Iteration 
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Each gj(Li) is an element of the pseudogroup T (Li) and, as explained in the previous 
section, the braid segment in each main iteration is constrained by g^ = g^ 3 9^ , 
k = p, q, or r. 

Each iteration starts from an input approximation Tj_i with a distance from the 
target T. We exploit the elements of the mesh S(Li, n) to generate a new braid T with 
a smaller distance £j. The lengths L, in Eq. (fTTj) . which characterize the pseudogroups 
used in the main processor, control the density of the corresponding meshes and are 
chosen among the sets of stored pseudogroups in order to correct the residual error in 
an efficient way (see Sec. [5]). 

Let us analyze now the details of each step in the hashing algorithm. The 
preprocessor is a fast procedure to generate a rough approximation of the target gate 
T G SU(2) and, in general, it associates to every T a braid which is an element 
of [Z(Lo)] m (of length mLo). Therefore, the preprocessor approximates T with the 
ordered product of elements in the icosahedral pseudogroup X (L ) that best represents 
it, minimizing their distance. Thus we obtain a starting braid 

f L °' m = g jl (L )g h (L )...g jm (L ) (18) 

with an initial error to reduce. The preprocessor procedure relies on the fact that, 
choosing a small Lq, we obtain a substantial discrepancy between the elements gi of the 
icosahedral group and their representatives g iy as shown in Fig. |2j Because of these 
seemingly random errors, the set [X(L )] m of all the products g^g^ ■ ■ ■ gj m is well spread 
all over SU(2) and can be thought as a random discretization of the group. In particular 
we find that the pseudogroup X(8) has an average error of about 0.24 and it is sufficient 
to take m = 3 [as we did in Eq. ( TT71) ] to cover the whole SU(2) in an efficient way 
with 60 3 operators. The average error for an arbitrary single-qubit gate with its nearest 
element T 8,3 G [X(8)] 3 is about 0.027. 

One can then apply the main processor to the first approximation To of the target 
gate. Each subsequent iteration improves the previous braid representation of T by 
adding a finer rotation to correct the discrepancy with the target and generate a new 
braid. In the first iteration we use the mesh S(Li,n) to efficiently reduce the error in 
Tq"\ Multiplying Tq" 1 by all the elements of S(Li,n), we generate 60 n (O n if we use a 
subgroup of order O) possible braid representations of T : 

To m g ll g i2 ...g i J ln+1 (19) 

Among these braids of length (n + l)Li + mL , we search the one with the shortest 
distance to the target gate T. This braid, T\ (L ,m, Xi,n), is the result of the first 
iteration in the main processor. 

The choice of L = 24 for the first step is dictated by the analysis of the mean error 
of the preprocessor (~ 0.03) that requires, as we will see in the following section, a 
pseudogroup with compatible error for an efficient correction. An example of the first 
iteration is illustrated in Ref. [6]. 

With T% we can then apply the second and third iterations of the main processor 
to obtain an output braid of the form in Eq. (TlTl) . These iterations further reduce the 
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L -44 L =68 




Figure 4. Probability densities of the distance d from the target of 10000 random tests 
after the second (L = 44) and third (L = 68) main processors. The trend agrees with 
the unitary Wigner-Dyson distribution with average errors 2.28 x 10 -5 and 7.60 x 10 -7 , 
respectively. 



residual discrepancy in decreasing error scales. Each step in the main processor requires 
the same runtime, during which a search within 60™ braids selects the one with the 
shortest distance to T. One must choose appropriate pseudogroups with longer braid 
lengths L 2 and L 3 to generate finer meshes. As for L±, we choose L 2 and L 3 to match 
the error of the corresponding pseudogroup to the respective mean residual error. In 
practice, we choose L 2 = 44 and L3 = 68. The final output assumes the form in Eq. (TTT1) 
and the average distance to the target braid (in 10000 random tests) is 2.29 x 10~ 5 after 
the second iteration and 8.24 x 10~ 7 after the third. Without reduction the final length 
is 568; however, due to shortenings at the junctions where different braid segments meet, 
the practical final length of the weave is usually smaller. 

4-2. Connection with random matrix theory and reduction factor for the main processor 

To analyze the efficiency of the main processor we must study the random nature of 
the meshes S(L,n). The distribution of the distance between the identity and their 
elements has an intriguing connection to the Gaussian unitary ensemble of random 
matrices, which helps us to understand how close we can approach the identity in this 
way, and therefore what the optimal choice of the lengths of the pseudogroups is for 
each iteration of the main processor. 

Let us analyze the group property deviation for the pseudogroup X(L) for braids of 
length L. One can write g~i = gie lAi , where Aj is a Hermitian matrix, indicating the small 
deviation of the finite braid representation to the corresponding SU(2) representation 
for an individual element. For a product of cji that approximate ■ ■ ■ g n +i = e, one 
has 

Mi ■ ■ ■ ~9n+i = </,<' ;A 7/,<* ;A ' • • ■ Sn+ie iA " +1 = e iHn , (20) 
where H n , related to the accumulated deviation, is 

H n = gAiQl 1 + //,.</ A///, ; .'/. ' +'-- + 9i9j'-- dnKg- 1 ■ ■ ■ 9j l 9^ + K+i + 0(A 2 ). (21) 
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The natural conjecture is that, for a long enough sequence of matrix product, the 
Hermitian matrix H n tends to a random matrix corresponding to the Gaussian unitary 
ensemble. This is plausible as H n is a Hermitian matrix that is the sum of random 
initial deviation matrices with random unitary transformations. A direct consequence 
is that the distribution of the eigenvalue spacing s obeys the Wigner-Dyson form [28] . 

P( S ) = I ±Y e-(*A)(-/.o) a , (22) 

where so is the mean level spacing. For small enough deviations, the distance of H n to 
the identity, d (l,e %Hn ) = \\H n \\ + O (||if n || 3 ), is proportional to the eigenvalue spacing 
of H and, therefore, should obey the same Wigner-Dyson distribution. The conjecture 
above is indeed well supported by our numerical analysis, even for n as small as 3 or 
4: the distances characterizing the meshes with L = 24 and L = 48 obtained from the 
corresponding pseudogroups (Fig. |3]) follow the unitary Wigner-Dyson distribution. 

The elements of the meshes S(L,n) are of the form in Eq. (|20|) and this implies 
that, once we choose a pseudogroup X(L) whose average error d(L) is given by 
Eq. (1T61) . the mean distance sq in ( )22l) of the corresponding mesh from the identity 
is Sq(L) w y/n + 1 d(L) as resulting from the sum of n + 1 gaussian terms. 

At each iteration of the main processor, we increase the braid by (n + 1) =4 braid 
segments with length Lj. By doing that, we create 60 n braids and the main processor 
search, among them, the best approximation of the target. Therefore, the runtime is 
linear in the dimension of the meshes used and in the number of iterations. The unitary 
random matrix distribution implies that the mean deviation of the 4-segment braids 
from the identity (or any other in its vicinity) is a factor of \/n + I times larger than 
that of an individual segment. Considering the 3-dimensional nature of the unitary 
matrix space, we find that at each iteration the error (of the final braid to the target 
gate) is reduced, on average, by a factor of / ~ 60 n ^ 3 /\/n + 1 = 30, where 60 is the 
number of elements in the icosahedral group. This has been confirmed in the numerical 
implementation. 



4-3. Hashing with the cubic group 

For comparison, we also implemented the hashing procedure with the smaller cubic 
group. In this case the rotations in the group of the cube are 24; thus we choose n = 4 
to generate a comparable number of elements in each mesh S(L, n). Our implementation 
of the hashing with the cubic group uses a preprocessor with Lq = 8 and m = 4 and a 
main processor with L\ = 24 and n = 4. Approximating over 100 random targets, we 
obtained an average error 6.92 x 10 -4 after the main processor, comparable to 7.24 x 10 -4 
after the first iteration in the previous icosahedral group implementation. This result 
is consistent with the new reduction factor / cu b e = 24 4/ ' 3 /v / 5 ~ 30.96. However we note 
that the cubic hashing is less efficient both in terms of the braid length (because it 
requires n = 4 instead of n = 3) and in terms of the runtime (because the time required 
for the searching algorithm is linear in the elements of S and 24 4 > 60 3 ). 
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Without tail correction 


With tail correction 


10000 trials 


Average Error 


a 


Average Error 


a 


Preprocessor* 
Main, 1st iteration* 
Main, 2nd iteration 
Main, 3rd iteration 


0.027 
7.24 x 10~ 4 
2.29 x 10~ 5 
8.24 x 10~ 7 


0.010 
3.36 x 10~ 4 
1.3 x lO" 5 
5.6 x 10- 6 


0.027 
7.24 x 10~ 4 
2.28 x lO" 5 
7.60 x 10~ 7 


0.010 
3.36 x 10" 4 
9.79 x 10~ 6 
3.27 x 10~ 7 



Table 1. Average error and standard deviation for the hashing algorithm after the 
preprocessor and the three iterations of the main processor. The outputs in absence 
or presence of a tail correction for the second and third iterations are shown (the 
asterisk indicates that the preprocessor and the first iteration are not affected by the 
tail correction). This correction is based on the psudogroups with length 40 and 64 
instead of the standard ones, 44 and 68. Only about the 0.6% of the targets used the 
tail correction in the second iteration, but one notice that the results, both in terms 
of average error and in terms of standard deviation er, are extremely affected by these 
rare events. 

4-4- Tail correction 

The choice of the proper Lj is important. We determine them by the average error before 
each iteration. If a certain Li is too large, it generates a mesh around the identity that 
may be too small to correct the error relatively far from the identity, where the mesh is 
very fine. On the other hand, if Lj is too small, the mesh may be too sparse to correct 
efficiently The former situation occurs exactly when we treat the braids with errors 
significantly larger than the average; they correspond to the rare events in the tail of 
the distributions as shown in Fig. |H Such an already large error is then amplified with 
the fixed selection of Li = 24, 44, and 68. To avoid this, one can correct the "rare" 
braids 7i_i, whose error is higher than a certain threshold, with a broader mesh [e.g., 
S(Li-4,n)\. 

The tail correction is very efficient. If we correct for the 0.6% of the targets with 
the largest errors in the second iteration with 5(40,3) instead of 5(44,3), we reduce 
the average error by about 8% after the third iteration (see Table [[]). The drastic 
improvement is due to the fact that once a braid is not properly corrected in the second 
iteration, the third one becomes ineffective. We can illustrate this situation with the 
example of the operator %Y (where Y is the Pauli matrix): without tail correction it is 
approximated in the first iteration with an error of 0.0039, which is more than 5 times 
the average error expected. After the second iteration, we obtain an error of 4.3 x 10 -4 
(almost 20 times higher than the average value) and after the third the error becomes 
2.0 x 10 -4 (more than 200 times the mean value). If we use 5(40, 3) instead of 5(44, 3) 
in the second iteration we obtain an error 4.46 x 10~ 5 , with a shorter braid than before, 
and a final error of 1.31 x 10~ 6 which is less than twice the average error. 
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5. General efficiency of the algorithm 

To evaluate the efficiency of the hashing algorithm it is useful to calculate the behaviour 
of the maximum length of the braids and of the runtime with respect to the average 
error obtained. We compare the results with those of the brute-force search (which gives 
the optimal braid length) and of the Solovay-Kitaev algorithm. 

As described in Sec. I4.2[ we reduce the average error at the ith iteration to 

ei~e<_i// with /w 30. (23) 

The total number of iterations (or depth) to achieve a final error of e is then 

M ~ (24) 
In/ 

so the expected error after each iteration is 

ln(l/£i) ~iln/. (25) 

For efficient optimization, we choose the length Lj of the braid segments at the ith 
iteration to approximate the corresponding icosahedral group elements with an average 
error of £j_i (see discussions in Sec. 14.41) . So we have, from Eq. (TT6]) . 

£i~£ln(l/e<_i) (26) 

with C ~ 6 [see Eq. ffTB"]) ] and the length of the braid we construct increases by 
(n + l)Lj = 4Lj at the i-th iteration, i.e., 

Li — Lj_i = 4£ In (l/e^O ~ 4C(i - 1) In /. (27) 

Thus the total length of the braid with an error of e is 

M 

L M ~ ^4£(z- l)ln/ ~ M 2 . (28) 

The final results for the hashing algorithm are, therefore, 

L qh ~(ln(l/ £ )) 2 , (29) 
T qh ~ M ~ In (1/e) . (30) 

We have explicitly confirmed that we can realize the perfect length-error scaling as 
shown in Fig. [5] up to three iterations in the main processor. 

We can conclude that while no method beats the brute-force search in length, we 
achieve a respectable gain in time. Comparing these results with the length of the braids 
obtained by the Solovay-Kitaev algorithm in Eq. ([3]) and with its runtime in Eq. (j3J), 
the hashing algorithm gives results that are better than the Solovay-Kitaev results in 
terms of length and significantly better in terms of time. 
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log 10 (1/e) 

Figure 5. The scaling performance of the hashing algorithm in terms of the square 
root of the maximum length versus the logarithm of the inverse error. The error is the 
average error in approximating 10000 random targets after the preprocessor and the 
three iterations in the main processor. The results agree with the expected behaviour 
[Eqs. PU) and (|30]) ]. 

6. Conclusions 

We have demonstrated, for a generic universal topological quantum computer, that the 
iterative pseudogroup hashing algorithm allows an efficient search for a braid sequence 
that approximates an arbitrary given single-qubit gate. This can be generalized to 
the search for two-qubit gates as well. The algorithm applies to the quantum gate 
construction in a conventional quantum computer given a small universal gate set, or 
any other problems that involve realizing an arbitrary unitary rotation approximately 
by a sequence of "elementary" rotations. 

The algorithm uses a set of pseudogroups based on the icosahedral group or other 
finite subgroups of SU(2), whose multiplication tables help generate, in a controllable 
fashion, smaller and smaller unitary rotations, which gradually (exponentially) reduce 
the distance between the result and the target. The iteration is in the same spirit as 
a generic renormalization group approach, which guarantees that the runtime of the 
algorithm is proportional to the logarithm of the inverse average final error \je\ the 
total length of the braid is instead quadratic in ln(l/e), and both the results are better 
than the Solovay-Kitaev algorithm introduced in textbooks. 

We have explicitly demonstrated that the result from the performance analysis is in 
excellent agreement with that from our computer simulation. We also showed that the 
residual error distributes according to the Wigner-Dyson unitary ensemble of random 
matrices. The connection of the error distribution to random matrix theory ensures that 
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we can efficiently carry out the algorithm and improve the rare cases in the distribution 
tail. 

The overhead of the algorithm is that we need to prepare several sets of braid 
representations of the finite subgroup elements. Obtaining the longer representation 
can be time-consuming; but fortunately, we only need to compute them once and use 
the same sets of representations for all future searches. 
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Appendix A. Distribution of the best approximation in a given set of braids 

In this Appendix we derive the distribution of the approximation to a gate in a given set 
of N braids in the vicinity of the identity. While it is sufficient for the discussions in the 
main text, this derivation can be generalized to the more generic cases. Let us assume 
that the targeted gate is go = U(l,(po) as defined in Eq. (fl2l) . The distance between g 
and the identity is s = 2sin(0 o /4) ~ </>o/2 for small (f>o- We then search in a given set 
of braids, either with a distribution as given in Eq. f fl5|) or from a generated random 
matrix distribution as discussed in Sec. 14.21 the one with the shortest distance to the 
target. 

We consider an arbitrary braid with representation g = U (rh, <fi) in a collection 
with a distribution p(s) of the distance to the identity s = 2sin(0/4). We define 

P(x) = [ p(s)ds, (A.l) 
Jo 

which is the probability of having a distance less than x < \/2. Obviously P(x) is a 
monotonically increasing function bound by -P(O) = and P(\/2) = 1. The distance 
d(go,g) between g and go is the same as that between g^ l g and the identity. To the 
first order in (ft and 4>o (as we assume all braids/gates are in the vicinity of the identity 
braid) we have, from Eq. ((TJ 



d(go,g) ~ y s 2 + si - 2(1 ■ m)s s = sm - s l , (A.2) 

which is bound by s + so and \s — sq\. We can see that the chance to find a braid that 
is close to go is large when p(s) peaks around sq. If we denote the probability of having 
no braids within a distance of t by Q(t), the probability of having the braid with the 
shortest distance between t and t + dt is 

Q(t) - Q(t + dt) = Q(t) /nM J p{s)ds6 (t - d(g , g)) \ , (A.3) 
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where the angled bracket implying the angular average of the averaged number of braids 
with a distance between t and t + dt. Therefore, 

- ^§^- = N /j^p(s)ds6(t - d(g ,g))\ . (A.4) 

As an example, we consider so = [i.e., with the full SU(2) rotation symmetry of the 
distribution], in which case 

- lnQ(t) — N [ p{s)ds = NP(t), (A.5) 



or Q(t) = exp[— NP(t)}. NP(t) is the expected number of braids with a distance to the 
identity less than t. The differential probability of having the braid with the nearest 
distance between t and t + dt is, therefore, 

q (t) = = N ^l e -NP(t) = Np (t )e -NP(t)_ (A6) 

(Jju (Jju 

Combining the results with Eq. ( TT5l) . we estimate for the brute- force search 

q BF (t; L) = N{L)p BF {t)e- N ^ p ^ (A.7) 
with an average distance 



7T 



1/3 



r(|)-r(j,s^Q) 



d ( L ) = — ( A - 



6 2 / 3 [AT(L)] 1 /3 
where T(a,x) is the incomplete gamma function 

POO 

r(a,x) = / dtt a ' l e- 1 . (A.9) 



In the large L limit, d(L) ~ 1.021e L / 5 - 970 . This is the result we quoted in Eq. ( II 6p . 
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